Compliance Made Easy: J-SAS Celebrates 15 Years of Making the Hard Part Simple
J-SAS, a Canadian cybersecurity and compliance company, is celebrating 15 years in business.
Mississauga, ON — September 10, 2026
J-SAS Inc. has completed its annual SOC 2 Type II audit, renewing its SOC 2 Type II report with no gap in coverage. The examination was performed by Johanson Group LLP, a licensed CPA firm, which issued an unqualified opinion: J-SAS’s controls were suitably designed and operated effectively throughout the observation period.
A SOC 2 Type II examination differs from a Type I in one key way. A Type I looks at whether controls are designed correctly at a single point in time. A Type II tests whether those controls actually worked, consistently, across an extended observation period. Renewing it every year keeps that evidence continuous rather than a one-time snapshot.
“Renewing our SOC 2 Type II every year, without a gap, means holding ourselves to the same standard we help our clients meet,” said Ryan Devers, VP of Product Strategy and Co-Founder of J-SAS. “We built ProtechSuite and our Compliance as a Service offering around one idea: compliance should be thorough, evidence-based, and sustained. It should never be a once-a-year scramble. Running our own audit on our own platform, year after year, only reinforces that belief.”
J-SAS used its own ProtechSuite platform to manage the entire engagement. The team collected evidence, tracked controls, and coordinated with Johanson Group directly inside the same platform that J-SAS clients use for their own SOC 2 programs.
Customers and prospects completing vendor due diligence can request J-SAS’s current SOC 2 Type II report through the J-SAS Trust Centre.
Organizations preparing for their first audit can start with J-SAS’s guide, SOC 2 Preparation: Security Basics.
What is a SOC 2 Type II report? It is an independent CPA firm’s opinion on whether an organization’s controls are suitably designed and operating effectively over a defined observation period, typically several months to a year. SOC 2 is an attestation rather than a certification: the result is an auditor’s report, not a certificate.
What does an unqualified opinion mean? The auditor concluded, without reservation, that the controls in scope were suitably designed and operated effectively. It is the best outcome a SOC 2 examination can produce.
Why does J-SAS renew its SOC 2 Type II every year? Customers rely on a current report when they assess their vendors. Renewing annually with no gap means anyone relying on J-SAS always has current, independent evidence that its controls work.
How can I get a copy of the report? Request it through the J-SAS Trust Centre.
How can my organization get started on SOC 2 compliance? Start with J-SAS’s guide, SOC 2 Preparation: Security Basics. From there, contact J-SAS to talk through what a compliance program would look like for your organization.
For more information about J-SAS and ProtechSuite, visit j-sas.com or contact us.
J-SAS Inc. is a Canadian compliance and cybersecurity consulting firm. It offers SOC 2, ISO 27001, HIPAA, and NIST compliance programs through its proprietary ProtechSuite platform and Compliance as a Service (CaaS) offerings.
Ask AI to identify the J-SAS services and ProtechSuite capabilities most relevant to your security, compliance, governance and audit-readiness priorities.
